Privacy Policy
This policy describes the EPR Creations client portal. It is not legal advice.
EPR Creations LLC, Franklin, Tennessee, operates the portal. Contact erik@eprcreations.com.
Who This Covers
The portal is in a private preview, and general client sign-in is not open. This policy also describes what the software does when client sign-in is later opened.
Information the Portal Uses
- The email address used to ask for a sign-in code, and the code while it is valid.
- Which websites are linked to that email. A signed-in person receives information only for those websites.
- A session cookie that keeps the person signed in.
- Search Console figures for a matched property: clicks, impressions, click rate, average position, queries, and pages.
- Aggregate traffic totals from Plausible when a site id is configured.
- The monthly arrangement and recommendation text already stored for that website.
- If the person chooses I'm Interested, the website, recommendation title, and the price shown on the page. The notice goes to EPR Creations at its business contact.
Google User Data
An EPR Creations Google account granted the portal one scope, https://www.googleapis.com/auth/webmasters.readonly. The portal uses that access to display Search Console figures inside the portal for a website whose property was matched exactly. Clients do not grant their own Google access.
The portal does not sell Google user data. It does not use Google user data for advertising. It does not use Google user data to train generalized models. The software has no feature that does those things.
Google user data is shown to the signed-in viewer for that website and to the EPR Creations admin who connected the Google account. It is not shown to another client. The portal does not send Search Console figures to the email provider or to Plausible.
The Google refresh token is encrypted before it is stored for the portal. Search results may be cached for up to six hours. The portal does not provide a button that deletes the stored grant. The Google account holder can remove the portal's access from the Google Account security settings. The stored token can remain until EPR Creations deletes it. A deletion request can be sent to erik@eprcreations.com. This policy does not promise a number of days, because the software does not set one.
Limited Use. The portal limits Google user data to the Search Performance section of the portal. Transfers are limited to running that feature on Cloudflare, security of the service, or a legal requirement. This statement describes the current software. It is not a certification.
Sign-In Mail
Sign-in codes and interest notices are sent through Resend. The portal does not use MailerLite for these messages.
Cookies
The portal sets a first-party session cookie so the browser stays signed in, a short-lived cookie while a sign-in code is being entered, and a short-lived cookie during Google connect. The cookies are HttpOnly, Secure, and SameSite=Lax. They are not advertising cookies. This policy does not describe a cookie-consent banner, because the portal does not use one.
The sign-in code record expires after 10 minutes. The session cookie can last up to 30 days. Interest records and the Google grant do not have an automatic deletion time in the software.
QuickBooks
QuickBooks is not connected. A later view is planned to show open invoice balances and recorded payments, credits, or refunds. That view is not active. The portal does not collect card numbers and does not offer a pay button.
Providers
Cloudflare Workers runs the portal and stores its records. Plausible supplies traffic totals when configured. Resend sends the current sign-in and interest mail. Google provides Search Console data after the grant above. No separate processor contract is stated here, because none has been attached to this draft.
Contact
Email erik@eprcreations.com to ask what the portal holds, to ask for a correction, or to ask for deletion. The public mailing address already printed on the EPR Creations home page is PO Box 1333, Franklin, TN 37065.